Is Google Chat safe?

Google Chat may not be the sexiest messaging platform, but built into Gmail and other elements of Google Workspace, it can be handy for office workers and others who want an alternative to services like Slack, WhatsApp, or Telegram. But how safe is it? Should you trust Google more than many of us do?

As you might guess, this is a complex issue. We’ve divided our answer into sections that address different aspects of service network security.

But overall, we’re pretty confident in saying “yes.” While no messaging service is completely immune to threats, you’re unlikely to encounter any serious problems with Google Chat. Not only is this down to Google’s security measures, but it’s a less ideal target – there are far more potential victims on services like WhatsApp and Telegram.

it should be. Data on Google servers is encrypted in transit and at rest, and like other Google apps and services, Google has features designed to detect or block malware and phishing (fake website) threats. We do wish the company offered end-to-end encryption like Google Messages (Android’s built-in text messaging app), but given the focus on permanent group chats (which Google calls “Spaces”), that might not be practical. End-to-end technology is great for one-on-one conversations.

Google Chat has been hacked in the past — a 2020 incident exposed some private conversations. However, nothing meaningful seems to have happened since then, so it appears Google has sufficiently beefed up security.

There are some important privacy details to note. While Google doesn’t use any chat content for advertising, it does collect your location data for some features (including security), and of course it already has your Google Account and contact data. It also collects some performance and crash information for analysis. Everything can be shared if the company receives orders from law enforcement or spy agencies, and end-to-end encryption even stops Google from snooping on conversations.

One good thing is that Google supports two-step verification (2SV). This is an optional feature but should definitely be turned on as it makes it harder for attackers to hijack your account.

Relatively speaking. As we said, it is not the main target of criminals as other platforms are more popular. Nowadays, it’s also mostly geared towards companies and other organizations, so it’s unlikely that someone will contact you out of the blue.

That said, scams are still possible. We have a more detailed guide on Google Chat scams, but here’s the short version of what to watch out for:

• Lottery tickets, giveaways and other fake prizes. It should be a given that people won’t give stuff away via Google Chat, let alone enter a contest you don’t remember entering.
• Tech Support Scam. Google and other major technology companies will never contact you through Chat about viruses or account security issues.
• Friends, family and similar impersonation scams. Be on the lookout for accounts with misspelled names and/or stolen images, especially if they immediately demand money or want you to click on a link.
• Job scams. No legitimate employer recruits directly through Google Chat. In the best-case scenario, a colleague might talk to you about an internal promotion, or a friend might refer you to a job listing on a reputable site like Indeed or LinkedIn.
• Romance/catfishing and prostitution scams. Unless you already know someone, you should immediately be suspicious of flirting or solicitation on Google Chat.
• Various phishing and malware attacks. These can include everything from get-rich-quick investment schemes to silent file transfer requests.

Frankly, you’re unlikely to strike up a conversation with a stranger in the first place. The service is primarily designed to keep you in touch with colleagues, or at least the people listed in your Google Contacts. Strangers may send you a message request, but you have to accept it before starting a conversation, and if they’re not in your contacts, this can be a red flag.

This setup makes the service fairly safe for adult users, but if you’re still worried, the tips below should keep you safe. We recommend directing children and teenagers to other platforms – but that’s not to say you’ll have a hard time.

How to keep Google Chat secure

These are tips that every chat user should follow.

• Enable 2SV (two-step verification) on your Google Account as soon as possible. Even if a hacker obtains your login information, they may lose the device they need to authenticate their login attempt. If you receive a 2SV prompt without trying to log in yourself, change your password immediately.
• If an offer or request comes from a previously unknown contact, it will naturally be suspicious. Google Chat is not designed for anonymous interactions. As a general rule, you should outright reject any message request from a stranger.
• Never click on links from unknown contacts. If you end up talking to a stranger somehow, you should take a close look at any URLs they share – scammers rely on domain names that sound official but don’t actually match the organization they’re supposed to represent. Or, they may rely on URL shorteners to disguise the link’s destination.
• Never download files you did not specifically request. Google Chat simplifies file transfers, but if you don’t think about them, they may contain malware or spyware.
• Real institutions won’t ask you to send money via Google Chat, or send any private data like account logins, banking information, or Social Security numbers. This is not how business and government operate. After all, they can’t assume you have access to the chat.
• If something seems too good to be true, it probably is. Be skeptical. You may not be lucky enough to acquire wealth or the love of your life through a random message contact.